{"id":"CVE-2025-63892","title":"A vulnerability was determined in SourceCodester Student Grades Management System 1.0","summary":"A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function create_classroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument…","severity":"medium","cvss":6.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-79"],"vendor":"remyandrade","product":"student_grades_management_system","affected":["student_grades_management_system = 1.0"],"published":"2025-11-18","updated":"2026-07-05","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-63892","references":[{"url":"https://github.com/minhajultaivin/security-advisories/blob/main/CVE-2025-63892.md","label":"cve@mitre.org"}],"tags":["nvd","exploit-available"],"epss":0.0036,"epssPercentile":0.27217,"ingestedAt":"2026-07-06T16:44:34.314Z","exploits":{"github":1,"githubRepos":["https://github.com/minhajultaivin/security-advisories"],"checkedAt":"2026-09-27T10:33:35.204Z"},"exploitAvailable":true,"slug":"CVE-2025-63892","body":"## Overview\n\nA vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function create_classroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting.\n\n## Affected\n\n- `student_grades_management_system = 1.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":49,"depthScoreParts":{"impact":37.4,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":4854,"id":"CVE-2025-63892","ts":1788887212038,"field":"exploit_available","old":"false","new":"true"},{"seq":3737,"id":"CVE-2025-63892","ts":1788886328602,"field":"exploit_available","old":"true","new":"false"},{"seq":2582,"id":"CVE-2025-63892","ts":1788883009710,"field":"exploit_available","old":"false","new":"true"},{"seq":1611,"id":"CVE-2025-63892","ts":1788882410015,"field":"exploit_available","old":"true","new":"false"},{"seq":722,"id":"CVE-2025-63892","ts":1788881847242,"field":"exploit_available","old":"false","new":"true"}]}